#!/usr/bin/env bash
# Build, verify, and deploy the VerdictTank proposal page.
#   ./build.sh          build + verify only
#   ./build.sh deploy   build + verify, then push to app3 (aborts if verify fails)
set -euo pipefail
cd "$(dirname "$0")"

HOST=root@152.53.241.111
KEY=/root/.ssh/itpp-infra
DOCROOT=/home/ippadmin/htdocs/proposals.itpropartner.com/verdicttank
SSH=(ssh -o StrictHostKeyChecking=no -i "$KEY" "$HOST")

cat parts/p*.html > index-v5.0.html
printf 'built  index-v5.0.html  %s bytes\n' "$(wc -c < index-v5.0.html)"

python3 verify-v5.py || { echo "verify FAILED, not deploying"; exit 1; }

[[ "${1:-}" == deploy ]] || { echo "build + verify OK (pass 'deploy' to publish)"; exit 0; }

# scp is blocked by the raw-IP security gate; base64 over ssh is the workaround.
base64 -w0 index-v5.0.html | "${SSH[@]}" "base64 -d > $DOCROOT/index.html \
  && cp $DOCROOT/index.html $DOCROOT/index-v5.0-source.html \
  && chown ippadmin:ippadmin $DOCROOT/index.html $DOCROOT/index-v5.0-source.html \
  && chmod 644 $DOCROOT/index.html \
  && md5sum $DOCROOT/index.html"
md5sum index-v5.0.html

python3 verify-v5.py >/dev/null && echo "deployed and verified"